Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9FD443BCD39111ED8E792EA7F1222468.roa
File: 9FD443BCD39111ED8E792EA7F1222468.roa (raw, json)
Hash identifier: bSZI4TDKNikv70uZoWUiiJ+R9Nn2ScF+La/rg45qUaE=
Subject key identifier: EA:32:79:6E:32:41:98:87:E3:9B:2D:67:0E:70:C8:5E:CB:16:56:52
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0696
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9FD443BCD39111ED8E792EA7F1222468.roa
Signing time: Wed 05 Apr 2023 09:09:52 +0000
ROA not before: Wed 05 Apr 2023 09:09:49 +0000
ROA not after: Wed 13 Apr 2033 09:09:49 +0000
asID: 140902
IP address blocks: 192.142.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 06:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 5 09:09:49 2023 GMT
Not After : Apr 13 09:09:49 2033 GMT
Subject: CN=642d3ae0-153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:be:b6:b8:d3:31:72:d6:f8:1d:02:12:96:
ae:f4:56:6a:37:ee:15:c4:b2:8d:21:a6:a7:88:84:
9e:c4:34:d7:5e:dc:a9:51:93:e8:3b:07:a0:92:5f:
94:2d:f2:38:55:56:3d:5f:96:e2:4c:b3:4a:1f:1f:
37:f9:f4:ef:55:69:0c:21:24:b4:55:ee:51:d5:53:
e7:a1:ed:63:18:2c:49:2f:e6:85:8b:cf:20:0f:03:
87:2d:68:e2:b3:a5:11:63:f3:91:14:fc:b1:fc:45:
ca:aa:c8:99:c8:28:ed:9a:04:7d:77:b4:e7:a5:83:
27:1f:e3:bf:0c:ae:e0:65:aa:b9:7f:e9:23:60:c3:
3d:b5:81:2c:84:fb:d1:16:09:94:ea:b1:bc:96:39:
0a:af:f6:c2:0a:1b:3b:da:ef:d0:14:52:72:46:28:
3a:c3:f3:71:a4:fa:fa:8f:eb:e6:57:2b:79:81:8a:
4c:1f:cf:e3:71:22:35:fc:5c:f6:2c:00:e8:a3:a1:
80:97:27:3c:ba:4b:27:00:61:cd:e7:2c:aa:c5:24:
df:f2:be:ff:be:af:55:1e:71:c7:3e:33:33:8d:e0:
48:fe:05:6a:86:c3:df:8f:52:e0:e5:1a:3b:d6:b1:
ea:f7:14:1b:1d:63:c3:be:31:cb:e3:7f:c1:7a:1b:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:79:6E:32:41:98:87:E3:9B:2D:67:0E:70:C8:5E:CB:16:56:52
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9FD443BCD39111ED8E792EA7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.7.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c2:50:9a:c5:31:f7:f9:f0:59:45:80:13:0b:6c:f2:8d:51:
50:2b:62:52:51:79:76:5f:f0:73:2e:13:0a:3f:dc:35:ef:27:
03:d6:6b:8a:7b:50:d1:41:c0:66:2f:a6:bf:33:88:64:bd:88:
25:7c:ce:5e:cb:62:df:23:1a:88:df:0e:d3:8d:37:2d:6f:ae:
02:af:94:9b:4e:68:80:a0:4f:db:08:a5:05:7b:cb:69:3d:79:
d2:73:0a:9a:92:dc:db:5b:77:33:0e:2a:66:03:30:0f:a1:60:
00:cb:7e:b3:79:94:bd:01:58:32:c4:ef:f9:67:bf:32:65:6e:
6d:5a:b1:a3:05:71:0e:2b:9f:02:ec:d4:17:b4:9c:0b:54:dc:
79:1e:ef:fd:c8:c4:56:4d:6e:48:ba:fb:67:7a:12:bc:57:c5:
f3:fb:8f:80:b9:a8:8c:c1:62:a1:c4:db:c7:6b:46:c3:af:0d:
82:5c:b5:b6:8c:35:32:15:c1:80:53:9f:91:5a:93:30:51:d0:
02:0b:d1:a4:05:73:96:3e:40:f6:31:e1:a1:24:88:42:27:c9:
ff:e0:40:db:16:41:6e:47:52:f0:c6:81:3d:b1:75:91:37:fe:
db:26:3d:6f:7b:59:39:e9:81:c1:aa:99:e1:af:0b:0f:2d:18:
d5:a5:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org